1. Information We Collect

We collect information that you provide directly to us when you use our services, apply for programs, or communicate with our team. This includes personal details necessary for program enrollment and career development support.

Personal Information Collected:

• Full name and contact information (email, phone, address)
• Educational background and academic transcripts
• Professional experience and career objectives
• Program application materials and essays
• Payment information for course enrollment
• Communication records and feedback

We also automatically collect certain technical information when you visit our website, including IP addresses, browser type, and usage patterns. This helps us improve our digital platform and provide better user experiences.

2. How We Use Your Information

Your information supports our mission to provide high-quality career development in community ecology. We use collected data to deliver educational services, maintain program quality, and support your professional growth.

We may also use aggregated, anonymized data for research purposes to better understand career trends in community ecology and improve our programs. Individual personal information is never shared in research contexts without explicit consent.

3. Information Sharing and Disclosure

Layer Brett ecologists does not sell personal information to third parties. We share information only when necessary to provide our services or when required by law under German and EU regulations.

All third-party partners are bound by confidentiality agreements and must comply with GDPR requirements when handling your personal information.

4. Your Rights Under German and EU Law

As a data subject under the General Data Protection Regulation (GDPR), you have specific rights regarding your personal information. We respect these rights and provide clear processes for exercising them.

To exercise these rights, contact our Data Protection Officer at the email address provided below. We will respond to your request within 30 days as required by GDPR. Some requests may require identity verification to protect your privacy.

5. Data Security and Protection

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security practices align with industry standards and German data protection requirements.

Technical Safeguards: We use encryption for data transmission and storage, secure servers located in Germany, regular security audits, and access controls limiting staff access to necessary information only. Our systems undergo regular updates and vulnerability assessments.

Administrative Safeguards: Staff receive regular privacy training, confidentiality agreements are required for all team members, and we maintain detailed data processing records as required by GDPR. Access to personal information is granted on a need-to-know basis.

Despite our security measures, no system is completely secure. We encourage you to protect your own information by using strong passwords and keeping your login credentials confidential.

6. Data Retention and Deletion

We retain personal information only as long as necessary to fulfill the purposes outlined in this policy or as required by German law. Retention periods vary based on the type of information and legal requirements.

After retention periods expire, we securely delete or anonymize personal information. You may request earlier deletion in certain circumstances, though legal obligations may require us to maintain some records for specified periods.

7. International Data Transfers

Your personal information is primarily processed and stored within Germany and the European Union. When we work with international partners or mentors, we ensure appropriate safeguards are in place for any data transfers outside the EU.

For transfers to third countries, we rely on adequacy decisions by the European Commission or implement appropriate safeguards such as Standard Contractual Clauses. We maintain documentation of all international transfers as required by GDPR.

8. Cookies and Website Analytics

Our website uses essential cookies to provide basic functionality and improve user experience. We also use analytics cookies to understand how visitors interact with our site, helping us improve our services.

You can control cookie preferences through your browser settings. Disabling certain cookies may limit website functionality. We provide clear information about cookie usage through our cookie banner and allow you to manage preferences.

We do not use cookies for advertising or tracking across other websites. Our analytics data is aggregated and anonymized to protect individual privacy.

9. Changes to This Privacy Policy

We may update this privacy policy to reflect changes in our practices, legal requirements, or service offerings. Material changes will be communicated to you via email or prominent website notice at least 30 days before taking effect.

We encourage you to review this policy periodically. Continued use of our services after policy updates constitutes acceptance of the revised terms. You always have the right to withdraw consent or discontinue services if you disagree with changes.

10. Contact Information and Complaints

If you have questions about this privacy policy, want to exercise your data rights, or need to report a privacy concern, please contact us using the information below. We take all privacy inquiries seriously and respond promptly.

You also have the right to lodge a complaint with the relevant supervisory authority if you believe we have not handled your personal information appropriately. In Germany, this is your regional data protection authority (Landesdatenschutzbehörde).